Lucene search
+L

10 matches found

Tenable Nessus
Tenable Nessus
•added 2026/09/15 12:00 a.m.•29 views

SUSE SLED15: libzypp / libzypp-devel / zypper / zypper-log / etc (SUSE-SU-2026:4129-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:4129-1 advisory. Security issue fixed: - invalidating legacy libzypp unsigned-repository cache state LIBZYPP-LEGACY-CACHE-01 bsc1274625....

5.8AI score
SaveExploits0References10
Tenable Nessus
Tenable Nessus
•added 2026/09/15 12:00 a.m.•16 views

SUSE SLED15: libzypp / libzypp-devel / zypper / zypper-log / etc (SUSE-SU-2026:4112-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:4112-1 advisory. Security issue fixed: - invalidating legacy libzypp unsigned-repository cache state LIBZYPP-LEGACY-CACHE-01 bsc1274625....

5.8AI score
SaveExploits0References10
Tenable Nessus
Tenable Nessus
•added 2026/09/14 12:00 a.m.•21 views

SUSE SLED15: libzypp / libzypp-devel / zypper / zypper-log / etc (SUSE-SU-2026:4096-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:4096-1 advisory. Security issue fixed: - invalidating legacy libzypp unsigned-repository cache state LIBZYPP-LEGACY-CACHE-01 bsc1274625....

5.8AI score
SaveExploits0References10
SUSE Linux
SUSE Linux
•added 2026/09/09 8:34 a.m.•16 views

Security update for libzypp, zypper

This update for libzypp, zypper fixes the following issues: Security issue fixed: invalidating legacy libzypp unsigned-repository cache state LIBZYPP-LEGACY-CACHE-01 bsc1274625. hasCredentials requires both username AND password to be non-empty bsc1273242. GPG Key hints in repoindex.xml require a...

5.9AI score
SaveExploits0References18
SUSE Linux
SUSE Linux
•added 2026/09/08 4:31 p.m.•11 views

Security update for libzypp, zypper

This update for libzypp, zypper fixes the following issues: Security issue fixed: invalidating legacy libzypp unsigned-repository cache state LIBZYPP-LEGACY-CACHE-01 bsc1274625. hasCredentials requires both username AND password to be non-empty bsc1273242. GPG Key hints in repoindex.xml require a...

5.9AI score
SaveExploits0References18
OSV
OSV
•added 2026/09/08 4:31 p.m.•33 views

SUSE-SU-2026:4092-1 Security update for libzypp, zypper

This update for libzypp, zypper fixes the following issues: Security issue fixed: - invalidating legacy libzypp unsigned-repository cache state LIBZYPP-LEGACY-CACHE-01 bsc1274625. - hasCredentials requires both username AND password to be non-empty bsc1273242. - GPG Key hints in repoindex.xml...

5.9AI score
SaveExploits0References10
OSV
OSV
•added 2024/11/18 1:19 p.m.•28 views

SUSE-SU-2024:4006-1 Security update for SUSE Manager Server 4.3

This update fixes the following issues: cobbler: - Security issues fixed: CVE-2024-47533: Prevent privilege escalation from none to admin bsc1231332 - Other bugs fixed: Increase start timeout for cobblerd unit bsc1219450 Provide syncsinglesystem for DHCP modules to improve performance bsc1219450...

9.8CVSS8.2AI score0.04003EPSS
SaveExploits6References57
Positive Technologies
Positive Technologies
•added 2013/10/28 12:00 a.m.•2 views

PT-2013-4573

Name of the Vulnerable Software and Affected Versions libzypp versions 12.15.0 and earlier Description The issue affects the RPM GPG key import and handling feature, potentially allowing remote attackers to deceive users into trusting a repository signed by a less trustworthy key. This is possibl...

4.3CVSS0.01533EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2013/10/28 12:00 a.m.•6 views

CVE-2013-3704: Undefined Security Weakness

The RPM GPG key import and handling feature in libzypp 12.15.0 and earlier reports a different key fingerprint than the one used to sign a repository when multiple key blobs are used, which might allow remote attackers to trick users into believing that the repository was signed by a...

4.3CVSS5.9AI score0.01533EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2012/10/10 12:00 a.m.•8 views

CVE-2012-5356: Improper Input Validation

The apt-add-repository tool in Ubuntu Software Properties 0.75.x before 0.75.10.3, 0.80.x before 0.80.9.2, 0.81.x before 0.81.13.5, 0.82.x before 0.82.7.3, and 0.92.x before 0.92.8 does not properly check PPA GPG keys imported from a keyserver, which allows remote attackers to install arbitrary...

5.8CVSS5.9AI score0.01968EPSS
SaveExploits0References2
Rows per page
Query Builder